Auditors want no SQL passwords on the water-quality database. Which server authentication setting enforces that goal?
Select an answer to reveal the explanation.
Short Explanation
Entra-only means the front door only takes Entra tickets—SQL’s old username/password keys bounce. Apps need tokens or managed identities, not a password taped under the keyboard.
Full Explanation
Microsoft Entra-only authentication configures the Azure SQL logical server or managed instance to accept Entra identities and reject SQL authentication. Mixed mode still allows local SQL logins and passwords. Key Vault can store secrets but does not by itself eliminate SQL authentication. TDE encrypts data at rest and is unrelated to whether SQL passwords are accepted.